Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a6aec9ce-2dea-3427-b4c9-0813bac0220e.roa
File:                     a6aec9ce-2dea-3427-b4c9-0813bac0220e.roa (raw, json)
Hash identifier:          14YlbGbIEgPVrY5flo3A+u7CsnesTimoCpWPkETanlw=
Subject key identifier:   33:8F:5D:89:A3:AD:32:4A:D2:31:28:D8:3F:62:94:92:63:A4:1A:A9
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B76F24DC5A03476777D68D760
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a6aec9ce-2dea-3427-b4c9-0813bac0220e.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     22773
IP address blocks:        174.65.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:4d:c5:a0:34:76:77:7d:68:d7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=a9d85cb4-21a2-472a-98d6-79c4281d989a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d3:16:de:1b:70:56:ac:10:24:10:cb:ee:c7:
                    88:10:2c:5b:b8:25:92:55:3d:18:e0:38:ad:0d:c3:
                    4c:09:75:6d:b2:0d:25:ed:5e:45:7d:7b:df:a8:3b:
                    d1:62:5f:fb:23:4c:3e:4d:aa:e2:c6:61:f8:70:8d:
                    10:09:78:49:d6:59:8f:e8:13:44:1d:75:0f:a9:cc:
                    11:21:81:b1:66:f4:13:63:3a:a1:13:30:29:48:07:
                    b8:a4:8c:c9:3a:8d:ce:5e:bb:3b:31:d7:9a:ba:46:
                    c9:c3:85:fe:45:4a:58:6e:c5:a6:4d:07:16:cf:02:
                    55:ee:02:3e:3d:26:f8:68:52:bf:d3:4b:a8:43:b3:
                    fa:b1:57:02:85:61:f8:81:42:44:be:ae:06:df:05:
                    c1:a4:d5:b2:9e:e0:17:af:e4:d7:ac:e8:2a:c9:1f:
                    32:1e:28:a9:2d:23:99:8c:bc:49:e3:82:e9:9b:de:
                    53:e0:e2:a7:2d:e3:62:50:46:d3:06:23:aa:5a:17:
                    69:63:02:9e:6f:a2:a4:95:40:10:44:e1:e7:49:88:
                    08:99:55:91:5a:d5:4b:7f:2a:cd:ca:d6:5b:ec:09:
                    e5:04:43:b1:4d:75:c3:b0:98:79:56:6a:7c:3e:e8:
                    6a:1d:5a:70:a5:f1:be:83:81:38:b0:e5:8e:94:e9:
                    09:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:8F:5D:89:A3:AD:32:4A:D2:31:28:D8:3F:62:94:92:63:A4:1A:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a6aec9ce-2dea-3427-b4c9-0813bac0220e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.65.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:d6:0a:ba:fe:c0:97:18:74:00:25:81:a8:ec:c8:4e:27:ff:
         88:15:38:b7:06:54:42:2b:f2:5d:45:94:02:51:a6:49:9e:4f:
         02:8a:44:4e:49:1d:16:f5:70:9a:4e:83:a8:48:7d:f2:f3:ee:
         35:75:5f:a6:3e:20:0a:d7:72:1c:cc:85:ec:0e:fc:bc:d9:c9:
         4d:a8:ea:34:20:86:78:d9:48:42:4d:d3:39:4c:0d:76:28:dc:
         dc:b0:3b:b0:58:f8:03:04:cb:e8:ee:6c:2c:a1:33:aa:88:e9:
         7d:e5:c8:e0:74:84:e5:69:0a:6b:ee:16:c5:68:1e:ff:26:b1:
         25:e4:56:c2:8d:02:1c:ab:e6:8d:43:fb:f0:0c:02:19:93:8b:
         6f:a6:f6:4c:6c:94:c0:98:42:fe:ca:59:0e:6d:35:88:29:21:
         6b:3e:b6:04:bc:9f:c9:c6:e2:03:8f:71:43:63:b5:e1:e7:86:
         9e:84:84:a2:ed:d6:36:5e:37:6a:2d:d5:04:74:26:d4:b0:91:
         11:fc:fe:5c:16:cc:bc:a4:7b:39:a6:96:80:5f:1f:37:d4:47:
         69:53:f1:9c:3c:2a:5e:ff:24:9a:96:d7:fc:82:05:aa:eb:70:
         e9:4c:a0:68:6c:dc:19:a8:d6:09:aa:65:35:aa:4d:07:de:fb:
         b6:64:5a:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28k3FoDR2d31o12AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk
YTlkODVjYjQtMjFhMi00NzJhLTk4ZDYtNzljNDI4MWQ5ODlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNMW3htwVqwQJBDL7seIECxbuCWSVT0Y4Dit
DcNMCXVtsg0l7V5FfXvfqDvRYl/7I0w+TarixmH4cI0QCXhJ1lmP6BNEHXUPqcwR
IYGxZvQTYzqhEzApSAe4pIzJOo3OXrs7MdeaukbJw4X+RUpYbsWmTQcWzwJV7gI+
PSb4aFK/00uoQ7P6sVcChWH4gUJEvq4G3wXBpNWynuAXr+TXrOgqyR8yHiipLSOZ
jLxJ44Lpm95T4OKnLeNiUEbTBiOqWhdpYwKeb6KklUAQROHnSYgImVWRWtVLfyrN
ytZb7AnlBEOxTXXDsJh5Vmp8PuhqHVpwpfG+g4E4sOWOlOkJgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDOPXYmjrTJK0jEo2D9ilJJjpBqpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTZhZWM5Y2UtMmRlYS0z
NDI3LWI0YzktMDgxM2JhYzAyMjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkEsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIXWCrr+wJcYdAAlgajsyE4n/4gVOLcGVEIr8l1FlAJRpkmeTwKKRE5J
HRb1cJpOg6hIffLz7jV1X6Y+IArXchzMhewO/LzZyU2o6jQghnjZSEJN0zlMDXYo
3NywO7BY+AMEy+jubCyhM6qI6X3lyOB0hOVpCmvuFsVoHv8msSXkVsKNAhyr5o1D
+/AMAhmTi2+m9kxslMCYQv7KWQ5tNYgpIWs+tgS8n8nG4gOPcUNjteHnhp6EhKLt
1jZeN2ot1QR0JtSwkRH8/lwWzLykezmmloBfHzfUR2lT8Zw8Kl7/JJqW1/yCBarr
cOlMoGhs3Bmo1gmqZTWqTQfe+7ZkWnY=
-----END CERTIFICATE-----
Generated at Wed Oct 15 23:31:30 2025 by rpki-client